Debian Bug report logs - #607249
php5-cli: cookie validity isn't being read from php.ini

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: macarthur <133794m3r@gmail.com>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: php5-cli: cookie validity isn't being read from php.ini

Date: Thu, 16 Dec 2010 01:54:23 -0500

Package: php5-cli
Version: 5.3.3-6
Severity: important

php5 i believe the cli version doesn't allow for the data in the php.ini file
to be used properly. It still keeps it's 1440 second validity evne though i've
changed it to 10,800(about 3 hours). This is via the apache interface so it is
whatever version of php's package that apache is referencing to check on the
session data. The cli, and apache 2 php.ini files contained in said folder are
both set to 10,800 but it's apparently reading the value from some other place.
This issue has been in here for unknown amount of time. Since there's not been
any php updates i believe since lenny. The issue has persisted from lenny 5.0.5
up through squeeze and now into sid.



-- System Information:
Debian Release: 6.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages php5-cli depends on:
ii  libbz2-1.0              1.0.5-6          high-quality block-sorting file co
ii  libc6                   2.11.2-7         Embedded GNU C Library: Shared lib
ii  libcomerr2              1.41.12-2        common error description library
ii  libdb4.8                4.8.30-3         Berkeley v4.8 Database Libraries [
ii  libgssapi-krb5-2        1.8.3+dfsg-4     MIT Kerberos runtime libraries - k
ii  libk5crypto3            1.8.3+dfsg-4     MIT Kerberos runtime libraries - C
ii  libkrb5-3               1.8.3+dfsg-4     MIT Kerberos runtime libraries
ii  libmagic1               5.04-5           File type determination library us
ii  libonig2                5.9.1-1          Oniguruma regular expressions libr
ii  libpcre3                8.02-1.1         Perl 5 Compatible Regular Expressi
ii  libqdbm14               1.8.77-4         QDBM Database Libraries [runtime]
ii  libssl0.9.8             0.9.8o-4         SSL shared libraries
ii  libxml2                 2.7.8.dfsg-1     GNOME XML library
ii  mime-support            3.51-1           MIME files 'mime.types' & 'mailcap
ii  php5-common             5.3.3-6          Common files for packages built fr
ii  tzdata                  2010o-1          time zone and daylight-saving time
ii  ucf                     3.0025+nmu1      Update Configuration File: preserv
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

php5-cli recommends no packages.

Versions of packages php5-cli suggests:
pn  php-pear                      <none>     (no description available)

-- no debconf information

Message #10 received at submit@bugs.debian.org (full text, mbox, reply):

From: Macarthur Inbody <133794m3r@gmail.com>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: Re: Bug#607249: php5-cli: cookie validity isn't being read from php.ini

Date: Thu, 16 Dec 2010 01:59:52 -0500

[Message part 1 (text/plain, inline)]

Also, apparently it might be an issue with phpmyadmin. I'm not sure since
i've yet to look into how php handles it. If it is then i need to open a bug
report with that then.
On Thu, Dec 16, 2010 at 1:54 AM, macarthur <133794m3r@gmail.com> wrote:

> Package: php5-cli
> Version: 5.3.3-6
> Severity: important
>
> php5 i believe the cli version doesn't allow for the data in the php.ini
> file
> to be used properly. It still keeps it's 1440 second validity evne though
> i've
> changed it to 10,800(about 3 hours). This is via the apache interface so it
> is
> whatever version of php's package that apache is referencing to check on
> the
> session data. The cli, and apache 2 php.ini files contained in said folder
> are
> both set to 10,800 but it's apparently reading the value from some other
> place.
> This issue has been in here for unknown amount of time. Since there's not
> been
> any php updates i believe since lenny. The issue has persisted from lenny
> 5.0.5
> up through squeeze and now into sid.
>
>
>
> -- System Information:
> Debian Release: 6.0
>  APT prefers unstable
>  APT policy: (500, 'unstable')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
> Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
>
> Versions of packages php5-cli depends on:
> ii  libbz2-1.0              1.0.5-6          high-quality block-sorting
> file co
> ii  libc6                   2.11.2-7         Embedded GNU C Library: Shared
> lib
> ii  libcomerr2              1.41.12-2        common error description
> library
> ii  libdb4.8                4.8.30-3         Berkeley v4.8 Database
> Libraries [
> ii  libgssapi-krb5-2        1.8.3+dfsg-4     MIT Kerberos runtime libraries
> - k
> ii  libk5crypto3            1.8.3+dfsg-4     MIT Kerberos runtime libraries
> - C
> ii  libkrb5-3               1.8.3+dfsg-4     MIT Kerberos runtime libraries
> ii  libmagic1               5.04-5           File type determination
> library us
> ii  libonig2                5.9.1-1          Oniguruma regular expressions
> libr
> ii  libpcre3                8.02-1.1         Perl 5 Compatible Regular
> Expressi
> ii  libqdbm14               1.8.77-4         QDBM Database Libraries
> [runtime]
> ii  libssl0.9.8             0.9.8o-4         SSL shared libraries
> ii  libxml2                 2.7.8.dfsg-1     GNOME XML library
> ii  mime-support            3.51-1           MIME files 'mime.types' &
> 'mailcap
> ii  php5-common             5.3.3-6          Common files for packages
> built fr
> ii  tzdata                  2010o-1          time zone and daylight-saving
> time
> ii  ucf                     3.0025+nmu1      Update Configuration File:
> preserv
> ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime
>
> php5-cli recommends no packages.
>
> Versions of packages php5-cli suggests:
> pn  php-pear                      <none>     (no description available)
>
> -- no debconf information
>
>
>


-- 
~Macarthur Inbody AKA 133794m3r

[Message part 2 (text/html, inline)]

Message #15 received at 607249@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@debian.org>

To: macarthur <133794m3r@gmail.com>, 607249@bugs.debian.org

Cc: control <control@bugs.debian.org>

Subject: Re: [php-maint] Bug#607249: php5-cli: cookie validity isn't being read from php.ini

Date: Thu, 16 Dec 2010 08:08:50 +0100

severity 607249 normal
thank you

Sorry, but you're bug report is basically unparseable. You are mixing
cli and apache SAPIs, you didn't specify which configuration option
you're talking about. Could you please rephrase it, so it's more
clear? Please could you split your sentences into paragraphs and be
more specific (like say the name of the configuration option)?

Also could you test the real values of configuration options with ini_get()?
http://php.net/manual/en/function.ini-get.php

Ondrej
P.S.: severity Important has this description: "a bug which has a
major effect on the usability of a package, without rendering it
completely unusable to everyone." and I don't really see how failure
to read one config file option has "major effect on usability". I have
lowered the severity to normal level.

On Thu, Dec 16, 2010 at 07:54, macarthur <133794m3r@gmail.com> wrote:
> Package: php5-cli
> Version: 5.3.3-6
> Severity: important
>
> php5 i believe the cli version doesn't allow for the data in the php.ini file
> to be used properly. It still keeps it's 1440 second validity evne though i've
> changed it to 10,800(about 3 hours). This is via the apache interface so it is
> whatever version of php's package that apache is referencing to check on the
> session data. The cli, and apache 2 php.ini files contained in said folder are
> both set to 10,800 but it's apparently reading the value from some other place.
> This issue has been in here for unknown amount of time. Since there's not been
> any php updates i believe since lenny. The issue has persisted from lenny 5.0.5
> up through squeeze and now into sid.
>
>
>
> -- System Information:
> Debian Release: 6.0
>  APT prefers unstable
>  APT policy: (500, 'unstable')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
> Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
>
> Versions of packages php5-cli depends on:
> ii  libbz2-1.0              1.0.5-6          high-quality block-sorting file co
> ii  libc6                   2.11.2-7         Embedded GNU C Library: Shared lib
> ii  libcomerr2              1.41.12-2        common error description library
> ii  libdb4.8                4.8.30-3         Berkeley v4.8 Database Libraries [
> ii  libgssapi-krb5-2        1.8.3+dfsg-4     MIT Kerberos runtime libraries - k
> ii  libk5crypto3            1.8.3+dfsg-4     MIT Kerberos runtime libraries - C
> ii  libkrb5-3               1.8.3+dfsg-4     MIT Kerberos runtime libraries
> ii  libmagic1               5.04-5           File type determination library us
> ii  libonig2                5.9.1-1          Oniguruma regular expressions libr
> ii  libpcre3                8.02-1.1         Perl 5 Compatible Regular Expressi
> ii  libqdbm14               1.8.77-4         QDBM Database Libraries [runtime]
> ii  libssl0.9.8             0.9.8o-4         SSL shared libraries
> ii  libxml2                 2.7.8.dfsg-1     GNOME XML library
> ii  mime-support            3.51-1           MIME files 'mime.types' & 'mailcap
> ii  php5-common             5.3.3-6          Common files for packages built fr
> ii  tzdata                  2010o-1          time zone and daylight-saving time
> ii  ucf                     3.0025+nmu1      Update Configuration File: preserv
> ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime
>
> php5-cli recommends no packages.
>
> Versions of packages php5-cli suggests:
> pn  php-pear                      <none>     (no description available)
>
> -- no debconf information
>
>
>
> _______________________________________________
> pkg-php-maint mailing list
> pkg-php-maint@lists.alioth.debian.org
> http://lists.alioth.debian.org/mailman/listinfo/pkg-php-maint
>



-- 
Ondřej Surý <ondrej@sury.org>
http://blog.rfc1925.org/

Message #22 received at 607249@bugs.debian.org (full text, mbox, reply):

From: Macarthur Inbody <133794m3r@gmail.com>

To: Ondřej Surý <ondrej@debian.org>

Cc: 607249@bugs.debian.org, control <control@bugs.debian.org>

Subject: Re: [php-maint] Bug#607249: php5-cli: cookie validity isn't being read from php.ini

Date: Thu, 16 Dec 2010 06:54:10 -0500

[Message part 1 (text/plain, inline)]

it's saying it's 1440. And i was saying that i didn't know which part of it
that it was using. I've changed both the php.ini files in the
/etc/php5/apache2 and the /etc/php5/cli/

I've checked _both_ of those files. And i've changed them both to 10800. The
reason why it was mixed in or what have you, was because i was saying it how
i thought it should be. I wasn't sure _which_ file it's supposedly using. I
imagine that it's the php.ini in the /etc/php5/apache2 folder. But i wasn't
sure. And i don't know what this SAPIs are that you're talking about. and
it's 'session.gc_maxlifetime' parameter.

I have _no_ real idea about what the thing is doing. It's coming from the
apache2 folder. And it's still stating 1440 when i echo it out via php's
internal api that you listed.

On Thu, Dec 16, 2010 at 2:08 AM, Ondřej Surý <ondrej@debian.org> wrote:

> severity 607249 normal
> thank you
>
> Sorry, but you're bug report is basically unparseable. You are mixing
> cli and apache SAPIs, you didn't specify which configuration option
> you're talking about. Could you please rephrase it, so it's more
> clear? Please could you split your sentences into paragraphs and be
> more specific (like say the name of the configuration option)?
>
> Also could you test the real values of configuration options with
> ini_get()?
> http://php.net/manual/en/function.ini-get.php
>
> Ondrej
> P.S.: severity Important has this description: "a bug which has a
> major effect on the usability of a package, without rendering it
> completely unusable to everyone." and I don't really see how failure
> to read one config file option has "major effect on usability". I have
> lowered the severity to normal level.
>
> On Thu, Dec 16, 2010 at 07:54, macarthur <133794m3r@gmail.com> wrote:
> > Package: php5-cli
> > Version: 5.3.3-6
> > Severity: important
> >
> > php5 i believe the cli version doesn't allow for the data in the php.ini
> file
> > to be used properly. It still keeps it's 1440 second validity evne though
> i've
> > changed it to 10,800(about 3 hours). This is via the apache interface so
> it is
> > whatever version of php's package that apache is referencing to check on
> the
> > session data. The cli, and apache 2 php.ini files contained in said
> folder are
> > both set to 10,800 but it's apparently reading the value from some other
> place.
> > This issue has been in here for unknown amount of time. Since there's not
> been
> > any php updates i believe since lenny. The issue has persisted from lenny
> 5.0.5
> > up through squeeze and now into sid.
> >
> >
> >
> > -- System Information:
> > Debian Release: 6.0
> >  APT prefers unstable
> >  APT policy: (500, 'unstable')
> > Architecture: amd64 (x86_64)
> >
> > Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
> > Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
> > Shell: /bin/sh linked to /bin/dash
> >
> > Versions of packages php5-cli depends on:
> > ii  libbz2-1.0              1.0.5-6          high-quality block-sorting
> file co
> > ii  libc6                   2.11.2-7         Embedded GNU C Library:
> Shared lib
> > ii  libcomerr2              1.41.12-2        common error description
> library
> > ii  libdb4.8                4.8.30-3         Berkeley v4.8 Database
> Libraries [
> > ii  libgssapi-krb5-2        1.8.3+dfsg-4     MIT Kerberos runtime
> libraries - k
> > ii  libk5crypto3            1.8.3+dfsg-4     MIT Kerberos runtime
> libraries - C
> > ii  libkrb5-3               1.8.3+dfsg-4     MIT Kerberos runtime
> libraries
> > ii  libmagic1               5.04-5           File type determination
> library us
> > ii  libonig2                5.9.1-1          Oniguruma regular
> expressions libr
> > ii  libpcre3                8.02-1.1         Perl 5 Compatible Regular
> Expressi
> > ii  libqdbm14               1.8.77-4         QDBM Database Libraries
> [runtime]
> > ii  libssl0.9.8             0.9.8o-4         SSL shared libraries
> > ii  libxml2                 2.7.8.dfsg-1     GNOME XML library
> > ii  mime-support            3.51-1           MIME files 'mime.types' &
> 'mailcap
> > ii  php5-common             5.3.3-6          Common files for packages
> built fr
> > ii  tzdata                  2010o-1          time zone and
> daylight-saving time
> > ii  ucf                     3.0025+nmu1      Update Configuration File:
> preserv
> > ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library -
> runtime
> >
> > php5-cli recommends no packages.
> >
> > Versions of packages php5-cli suggests:
> > pn  php-pear                      <none>     (no description available)
> >
> > -- no debconf information
> >
> >
> >
> > _______________________________________________
> > pkg-php-maint mailing list
> > pkg-php-maint@lists.alioth.debian.org
> > http://lists.alioth.debian.org/mailman/listinfo/pkg-php-maint
> >
>
>
>
> --
> Ondřej Surý <ondrej@sury.org>
> http://blog.rfc1925.org/
>

[Message part 2 (text/html, inline)]

Message #27 received at 607249-done@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@debian.org>

To: Macarthur Inbody <133794m3r@gmail.com>

Cc: 607249-done@bugs.debian.org

Subject: Re: [php-maint] Bug#607249: php5-cli: cookie validity isn't being read from php.ini

Date: Wed, 27 Apr 2011 09:53:08 +0200

I am sorry, but you are still not making much sense, but I guess you
have just missed the paragraph in the README.Debian:

Session storage
---------------

    Session files are stored in /var/lib/php5.  For security purposes, this
    directory is unreadable by non-root users.  This means that php5 running
    from apache2, for example, will not be able to clean up stale session
    files.  Instead, we have a cron job run every 30 mins that cleans up
    stale session files; /etc/cron.d/php5.  You may need to modify how
    often this runs, if you've modified session.gc_maxlifetime in your
    php.ini; otherwise, it may be too lax or overly aggressive in cleaning
    out stale session files.

Andres Salomon <dilinger@debian.org>  Fri, 03 Sep 2004 03:12:54 -0400


cat /etc/cron.d/php5
# /etc/cron.d/php5: crontab fragment for php5
#  This purges session files older than X, where X is defined in seconds
#  as the largest value of session.gc_maxlifetime from all your php.ini
#  files, or 24 minutes if not defined.  See /usr/lib/php5/maxlifetime

# Look for and purge old sessions every 30 minutes
09,39 *     * * *     root   [ -x /usr/lib/php5/maxlifetime ] && [ -d
/var/lib/php5 ] && find /var/lib/php5/ -type f -cmin
+$(/usr/lib/php5/maxlifetime) -delete


cat /usr/lib/php5/maxlifetime
#!/bin/sh -e

max=1440

if which php5 >/dev/null 2>&1 && [ -e /etc/php5/apache2/php.ini ]; then
  cur=$(php5 -c /etc/php5/apache2/php.ini -d "error_reporting='E_ALL &
~E_DEPRECATED'" -r 'print ini_get("session.gc_maxlifetime");')
  [ -z "$cur" ] && cur=0
  [ "$cur" -gt "$max" ] && max=$cur
else
        for ini in /etc/php5/*/php.ini; do
          cur=$(sed -n -e
's/^[[:space:]]*session.gc_maxlifetime[[:space:]]*=[[:space:]]*\([0-9]\+\).*$/\1/p'
$ini 2>/dev/null || true);
          [ -z "$cur" ] && cur=0
          [ "$cur" -gt "$max" ] && max=$cur
        done
fi

echo $(($max/60))

exit 0


In other words it takes gc_maxlifetime from /etc/php5/apache2/php.ini
and if it doesn't find it parses configuration files and takes maximum
value from all php.inis.

O.

On Thu, Dec 16, 2010 at 12:54, Macarthur Inbody <133794m3r@gmail.com> wrote:
> it's saying it's 1440. And i was saying that i didn't know which part of it
> that it was using. I've changed both the php.ini files in the
> /etc/php5/apache2 and the /etc/php5/cli/
>
> I've checked _both_ of those files. And i've changed them both to 10800. The
> reason why it was mixed in or what have you, was because i was saying it how
> i thought it should be. I wasn't sure _which_ file it's supposedly using. I
> imagine that it's the php.ini in the /etc/php5/apache2 folder. But i wasn't
> sure. And i don't know what this SAPIs are that you're talking about. and
> it's 'session.gc_maxlifetime' parameter.
>
> I have _no_ real idea about what the thing is doing. It's coming from the
> apache2 folder. And it's still stating 1440 when i echo it out via php's
> internal api that you listed.
>
> On Thu, Dec 16, 2010 at 2:08 AM, Ondřej Surý <ondrej@debian.org> wrote:
>>
>> severity 607249 normal
>> thank you
>>
>> Sorry, but you're bug report is basically unparseable. You are mixing
>> cli and apache SAPIs, you didn't specify which configuration option
>> you're talking about. Could you please rephrase it, so it's more
>> clear? Please could you split your sentences into paragraphs and be
>> more specific (like say the name of the configuration option)?
>>
>> Also could you test the real values of configuration options with
>> ini_get()?
>> http://php.net/manual/en/function.ini-get.php
>>
>> Ondrej
>> P.S.: severity Important has this description: "a bug which has a
>> major effect on the usability of a package, without rendering it
>> completely unusable to everyone." and I don't really see how failure
>> to read one config file option has "major effect on usability". I have
>> lowered the severity to normal level.
>>
>> On Thu, Dec 16, 2010 at 07:54, macarthur <133794m3r@gmail.com> wrote:
>> > Package: php5-cli
>> > Version: 5.3.3-6
>> > Severity: important
>> >
>> > php5 i believe the cli version doesn't allow for the data in the php.ini
>> > file
>> > to be used properly. It still keeps it's 1440 second validity evne
>> > though i've
>> > changed it to 10,800(about 3 hours). This is via the apache interface so
>> > it is
>> > whatever version of php's package that apache is referencing to check on
>> > the
>> > session data. The cli, and apache 2 php.ini files contained in said
>> > folder are
>> > both set to 10,800 but it's apparently reading the value from some other
>> > place.
>> > This issue has been in here for unknown amount of time. Since there's
>> > not been
>> > any php updates i believe since lenny. The issue has persisted from
>> > lenny 5.0.5
>> > up through squeeze and now into sid.
>> >
>> >
>> >
>> > -- System Information:
>> > Debian Release: 6.0
>> >  APT prefers unstable
>> >  APT policy: (500, 'unstable')
>> > Architecture: amd64 (x86_64)
>> >
>> > Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
>> > Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
>> > Shell: /bin/sh linked to /bin/dash
>> >
>> > Versions of packages php5-cli depends on:
>> > ii  libbz2-1.0              1.0.5-6          high-quality block-sorting
>> > file co
>> > ii  libc6                   2.11.2-7         Embedded GNU C Library:
>> > Shared lib
>> > ii  libcomerr2              1.41.12-2        common error description
>> > library
>> > ii  libdb4.8                4.8.30-3         Berkeley v4.8 Database
>> > Libraries [
>> > ii  libgssapi-krb5-2        1.8.3+dfsg-4     MIT Kerberos runtime
>> > libraries - k
>> > ii  libk5crypto3            1.8.3+dfsg-4     MIT Kerberos runtime
>> > libraries - C
>> > ii  libkrb5-3               1.8.3+dfsg-4     MIT Kerberos runtime
>> > libraries
>> > ii  libmagic1               5.04-5           File type determination
>> > library us
>> > ii  libonig2                5.9.1-1          Oniguruma regular
>> > expressions libr
>> > ii  libpcre3                8.02-1.1         Perl 5 Compatible Regular
>> > Expressi
>> > ii  libqdbm14               1.8.77-4         QDBM Database Libraries
>> > [runtime]
>> > ii  libssl0.9.8             0.9.8o-4         SSL shared libraries
>> > ii  libxml2                 2.7.8.dfsg-1     GNOME XML library
>> > ii  mime-support            3.51-1           MIME files 'mime.types' &
>> > 'mailcap
>> > ii  php5-common             5.3.3-6          Common files for packages
>> > built fr
>> > ii  tzdata                  2010o-1          time zone and
>> > daylight-saving time
>> > ii  ucf                     3.0025+nmu1      Update Configuration File:
>> > preserv
>> > ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library -
>> > runtime
>> >
>> > php5-cli recommends no packages.
>> >
>> > Versions of packages php5-cli suggests:
>> > pn  php-pear                      <none>     (no description available)
>> >
>> > -- no debconf information
>> >
>> >
>> >
>> > _______________________________________________
>> > pkg-php-maint mailing list
>> > pkg-php-maint@lists.alioth.debian.org
>> > http://lists.alioth.debian.org/mailman/listinfo/pkg-php-maint
>> >
>>
>>
>>
>> --
>> Ondřej Surý <ondrej@sury.org>
>> http://blog.rfc1925.org/
>
>



-- 
Ondřej Surý <ondrej@sury.org>
http://blog.rfc1925.org/

Send a report that this bug log contains spam.